Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/NvssYDpeKvFa2MLf_VmLVLht1PM.roa
File:                     NvssYDpeKvFa2MLf_VmLVLht1PM.roa (raw, json)
Hash identifier:          uTbU4BrG8pOSok4MYFwrtXqt0JpT/fygW2bHhPj3vrc=
Subject key identifier:   36:FB:2C:60:3A:5E:2A:F1:5A:D8:C2:DF:FD:59:8B:54:B8:6D:D4:F3
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       FE
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/NvssYDpeKvFa2MLf_VmLVLht1PM.roa
Signing time:             Thu 23 Jun 2022 02:15:28 +0000
ROA not before:           Thu 23 Jun 2022 02:15:28 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38846
IP address blocks:        103.169.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Jun 23 02:15:28 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=36FB2C603A5E2AF15AD8C2DFFD598B54B86DD4F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:99:a8:1a:f8:3f:25:ee:62:4e:92:15:d8:
                    55:5d:a6:9e:25:48:b1:f4:20:5e:15:e5:59:e1:7c:
                    fc:0e:3a:19:17:17:00:0e:6c:a2:9c:89:a8:fe:36:
                    e7:f0:59:ff:ce:15:5e:0c:d4:0e:37:7a:e6:03:75:
                    57:72:66:37:f5:f2:32:13:39:e4:79:ee:a7:15:07:
                    c6:e4:b0:d6:38:d1:62:18:04:7c:40:39:c9:8e:de:
                    53:f8:a1:c4:21:94:29:87:a9:7e:09:d8:5f:89:f0:
                    3d:4e:20:63:ca:41:58:ee:f9:23:c8:11:a7:d3:79:
                    95:d7:2e:80:5a:2d:99:a9:7f:82:6f:95:ba:a7:ae:
                    63:07:84:0e:10:a4:5b:07:b9:2d:e6:e2:94:a4:3b:
                    c4:58:e1:4d:00:10:4c:9a:b5:32:21:e1:2f:26:6d:
                    28:96:3e:a6:7e:f1:71:d6:4b:1b:55:05:71:80:94:
                    24:a3:a0:f2:8b:4e:4e:6a:7b:8b:c9:b2:6e:fa:54:
                    bc:28:d7:4a:d3:d5:2d:ea:24:7f:28:8c:fb:cf:66:
                    2a:b0:f6:e5:8d:41:4c:ba:2e:aa:53:3e:d4:d6:89:
                    5c:08:3e:92:ca:a9:65:fa:45:3e:3b:12:be:87:13:
                    df:3f:2c:09:c7:4d:0a:04:8b:3a:70:db:49:c1:bb:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FB:2C:60:3A:5E:2A:F1:5A:D8:C2:DF:FD:59:8B:54:B8:6D:D4:F3
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/NvssYDpeKvFa2MLf_VmLVLht1PM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:18:24:2f:76:42:38:dd:89:b7:67:19:a2:94:36:6b:c9:
         65:ab:84:7e:07:f0:68:ea:92:df:15:64:b3:08:e5:d5:ca:b4:
         5d:05:26:f6:25:83:77:14:3e:bd:ac:c8:50:eb:a1:a6:ff:d6:
         60:47:78:3e:80:d7:7e:38:30:62:1d:db:a4:f1:11:e2:e3:f6:
         35:62:76:11:78:cc:30:f0:11:29:ff:c6:fd:ee:b1:71:1f:28:
         dd:2c:a2:6d:67:1b:1a:7f:c3:d4:a1:18:a4:eb:74:39:89:a0:
         bd:8e:f0:2c:d2:1d:f9:72:48:f1:ec:93:7e:97:e8:61:a4:27:
         e0:40:e4:f8:9f:1a:d8:77:48:cb:75:af:58:c0:bf:34:de:42:
         db:cb:b6:ab:3b:2f:a8:2d:ff:7b:af:31:a3:99:a3:91:b5:da:
         3c:5c:39:35:4b:32:25:bc:51:dd:04:a4:b4:4d:4f:d0:ad:89:
         04:a3:de:57:b4:38:2e:d2:ca:70:d1:17:50:25:9b:09:63:ae:
         ef:a0:ca:ea:fb:fa:b8:bd:79:8c:cf:d7:e0:19:90:c6:ce:0b:
         60:9b:c7:4c:87:5f:18:c5:b0:a9:b6:66:c3:bb:2f:f1:fe:d3:
         01:22:1c:f5:2f:da:0e:ae:ca:1c:78:bb:7d:85:13:20:51:a0:
         bf:45:a0:0c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNG
QzExNkEzQ0NCMTA1QUI1MERBNDE3Njc5QjFGOUM3MEE0QkQ5NzAeFw0yMjA2MjMw
MjE1MjhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDM2RkIyQzYwM0E1RTJB
RjE1QUQ4QzJERkZENTk4QjU0Qjg2REQ0RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxtpmoGvg/Je5iTpIV2FVdpp4lSLH0IF4V5VnhfPwOOhkXFwAO
bKKciaj+NufwWf/OFV4M1A43euYDdVdyZjf18jITOeR57qcVB8bksNY40WIYBHxA
OcmO3lP4ocQhlCmHqX4J2F+J8D1OIGPKQVju+SPIEafTeZXXLoBaLZmpf4Jvlbqn
rmMHhA4QpFsHuS3m4pSkO8RY4U0AEEyatTIh4S8mbSiWPqZ+8XHWSxtVBXGAlCSj
oPKLTk5qe4vJsm76VLwo10rT1S3qJH8ojPvPZiqw9uWNQUy6LqpTPtTWiVwIPpLK
qWX6RT47Er6HE98/LAnHTQoEizpw20nBu5n7AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUNvssYDpeKvFa2MLf/VmLVLht1PMwHwYDVR0jBBgwFoAUw/wRajzLEFq1DaQX
Z5sfnHCkvZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV09MRk5F
VC93X3dSYWp6TEVGcTFEYVFYWjVzZm5IQ2t2WmMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3dfd1JhanpMRUZxMURhUVhaNXNmbkhDa3ZaYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1dPTEZORVQvTnZzc1lEcGVLdkZhMk1M
Zl9WbUxWTGh0MVBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWepfjANBgkqhkiG9w0BAQsFAAOCAQEABLYYJC92QjjdibdnGaKUNmvJZauEfgfw
aOqS3xVkswjl1cq0XQUm9iWDdxQ+vazIUOuhpv/WYEd4PoDXfjgwYh3bpPER4uP2
NWJ2EXjMMPARKf/G/e6xcR8o3SyibWcbGn/D1KEYpOt0OYmgvY7wLNId+XJI8eyT
fpfoYaQn4EDk+J8a2HdIy3WvWMC/NN5C28u2qzsvqC3/e68xo5mjkbXaPFw5NUsy
JbxR3QSktE1P0K2JBKPeV7Q4LtLKcNEXUCWbCWOu76DK6vv6uL15jM/X4BmQxs4L
YJvHTIdfGMWwqbZmw7sv8f7TASIc9S/aDq7KHHi7fYUTIFGgv0WgDA==
-----END CERTIFICATE-----